Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
File: 1DySR0_tODyV-izNg9YU9X5WPYI.mft (raw, json)
Hash identifier: 89AcKNnFMd6OVfA2ZjxUXdJCp4Vj1dLkgxi6v/QpsYM=
Subject key identifier: 40:8C:FC:7D:2D:57:D5:BC:80:5B:F9:53:E2:EE:2F:D0:EE:22:23:18
Authority key identifier: D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
Certificate issuer: /CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Certificate serial: 019CAC7DD728FA02AD222480837856F50BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 03:00:54 +0000
Manifest this update: Mon 02 Mar 2026 03:00:54 +0000
Manifest next update: Tue 03 Mar 2026 03:00:54 +0000
Files and hashes: 1: 1DySR0_tODyV-izNg9YU9X5WPYI.crl (hash: Zyi4SXc7EosoAbawyIlJVPllg25ZvbcqbPUG2usTgRg=)
2: ZtLevkUDeSsHUXqGG47X0OZSfDw.roa (hash: 1v1351MYA0xtMfbN9thfHMsePTGwzyiZtU+ILH4KvII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:d7:28:fa:02:ad:22:24:80:83:78:56:f5:0b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Validity
Not Before: Mar 2 03:00:54 2026 GMT
Not After : Mar 3 03:00:54 2026 GMT
Subject: CN=408cfc7d2d57d5bc805bf953e2ee2fd0ee222318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0d:81:e2:63:99:15:df:54:8f:dc:42:40:86:
2c:40:0f:1e:21:21:20:4e:cc:4c:ab:8e:d1:d1:f3:
83:d3:9b:7b:66:90:99:c4:86:14:a0:c4:4e:13:11:
aa:70:51:11:15:dd:c9:02:d1:3f:3a:d5:61:e1:87:
47:27:44:39:14:a0:76:5e:1b:a0:38:84:3c:4c:07:
d8:70:49:bc:75:f2:a7:cc:c2:1f:c9:8e:4d:89:ac:
89:7a:3c:f5:6a:84:76:e8:c1:6d:50:fd:6d:07:8a:
1b:89:5b:cd:09:ea:d7:d6:05:a7:b3:37:6b:e9:17:
8e:74:c6:ca:97:3f:ef:94:a3:56:c5:d5:c4:53:6a:
7f:a6:ac:eb:6b:5e:e2:e8:07:2c:9b:7d:73:62:3f:
51:b7:a9:0e:4d:fc:b3:86:09:b4:b8:46:71:7d:1a:
2e:5d:ac:dd:3d:9c:8d:f3:6b:04:67:44:ae:86:00:
da:bd:a2:99:e7:ad:96:24:2b:33:4b:27:ff:cc:29:
09:cc:52:40:07:83:60:af:cb:ed:a7:ea:f9:c7:78:
7a:47:7c:a1:81:ca:dd:48:76:3f:de:73:85:13:0d:
17:5a:9c:c4:44:3b:73:66:89:4b:d4:7e:5c:fd:d0:
59:51:ce:c5:97:09:8a:6c:2e:0f:0c:1c:bb:d2:26:
c5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8C:FC:7D:2D:57:D5:BC:80:5B:F9:53:E2:EE:2F:D0:EE:22:23:18
X509v3 Authority Key Identifier:
keyid:D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:dc:85:5d:41:2d:51:60:55:9d:6a:7f:b2:96:bc:f3:f4:19:
95:1d:a9:e7:c7:1a:f3:63:a9:c2:fd:6a:e1:1f:bb:cd:64:55:
1f:e0:c9:21:96:8e:f1:26:b0:01:44:c7:6e:ca:92:b3:7f:0c:
9e:e6:4b:6e:07:9b:2d:88:5c:f3:12:16:a8:27:cb:74:cd:76:
8b:0e:5f:e3:84:0c:25:6c:6b:61:38:95:22:a3:32:db:3c:cd:
03:52:0e:f5:66:18:32:85:e4:90:78:75:dd:04:6d:77:57:4d:
d6:48:2f:14:b5:7e:a4:33:24:12:8c:9d:09:5c:17:f9:c3:4a:
9d:55:d1:fd:37:b4:d8:1a:38:80:d6:bb:ee:20:fc:7e:6f:97:
83:e9:39:6e:4f:22:8d:25:be:13:9b:1c:0e:04:df:38:62:8a:
49:23:ad:96:fb:31:a1:92:44:9d:a8:50:81:ec:f7:c0:23:6f:
bf:20:09:3a:36:4d:45:7c:f3:b4:a4:2b:6e:f5:10:37:c0:5b:
32:c4:3e:92:18:51:3f:35:2e:39:09:55:86:3f:41:77:4e:f8:
d1:6e:9e:4d:74:03:67:1c:33:96:14:40:7d:14:57:95:5d:fd:
26:09:a7:af:66:88:ee:93:18:75:6d:57:50:d9:31:f0:a3:dd:
12:23:1a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:50:08 2026 by rpki-client